On affected Arista EOS platforms, plaintext shared secrets configured for Terminal Access Controller Access-Control System Plus (TACACS+) servers can be inserted into log files under certain circumstances. This is classified as CWE-532, which involves the insertion of sensitive information into log files. The vulnerability affects versions ranging from 0.0.0 up to and including 4.36.1F across several version branches. The CVSS v3.1 base score is 6.3, reflecting medium severity with high impact on confidentiality, integrity, and availability, but requiring local access with high privileges and user interaction.

The vulnerability allows sensitive TACACS+ shared secrets to be exposed in plaintext within log files. This could lead to unauthorized disclosure of authentication credentials, potentially compromising network device access controls. The impact affects confidentiality, integrity, and availability as indicated by the CVSS vector. However, exploitation requires local access with high privileges and user interaction, limiting remote exploitation risk.

No vendor advisory or patch information is provided in the input data. Patch status is not yet confirmed — check the Arista Networks vendor advisory for current remediation guidance. Until a patch is available, restrict access to log files and monitor for unauthorized access to sensitive information in logs. Avoid logging sensitive secrets in plaintext where possible.